Close Menu
    DevStackTipsDevStackTips
    • Home
    • News & Updates
      1. Tech & Work
      2. View All

      Slack’s AI search now works across an organization’s entire knowledge base

      July 17, 2025

      In-House vs Outsourcing for React.js Development: Understand What Is Best for Your Enterprise

      July 17, 2025

      Tiny Screens, Big Impact: The Forgotten Art Of Developing Web Apps For Feature Phones

      July 16, 2025

      Kong AI Gateway 3.11 introduces new method for reducing token costs

      July 16, 2025

      Microsoft is on track to become the second $4 trillion company by market cap, following NVIDIA — and mass layoffs

      July 17, 2025

      The wireless gaming mouse I’ve used for 5 years is down to $30 — that’s less than 2 cents a day (and it’s still my favorite)

      July 17, 2025

      Researchers from OpenAI, Anthropic, Meta, and Google issue joint AI safety warning – here’s why

      July 17, 2025

      You’ll soon be able to chat with Copilot and attend Teams meetings while driving your Mercedes-Benz — now there’s no excuse to miss your meetings

      July 17, 2025
    • Development
      1. Algorithms & Data Structures
      2. Artificial Intelligence
      3. Back-End Development
      4. Databases
      5. Front-End Development
      6. Libraries & Frameworks
      7. Machine Learning
      8. Security
      9. Software Engineering
      10. Tools & IDEs
      11. Web Design
      12. Web Development
      13. Web Security
      14. Programming Languages
        • PHP
        • JavaScript
      Featured

      The details of TC39’s last meeting

      July 17, 2025
      Recent

      The details of TC39’s last meeting

      July 17, 2025

      Tinkerwell v5 is now released

      July 17, 2025

      Tinkerwell v5 is now released

      July 17, 2025
    • Operating Systems
      1. Windows
      2. Linux
      3. macOS
      Featured

      Microsoft is on track to become the second $4 trillion company by market cap, following NVIDIA — and mass layoffs

      July 17, 2025
      Recent

      Microsoft is on track to become the second $4 trillion company by market cap, following NVIDIA — and mass layoffs

      July 17, 2025

      The wireless gaming mouse I’ve used for 5 years is down to $30 — that’s less than 2 cents a day (and it’s still my favorite)

      July 17, 2025

      You’ll soon be able to chat with Copilot and attend Teams meetings while driving your Mercedes-Benz — now there’s no excuse to miss your meetings

      July 17, 2025
    • Learning Resources
      • Books
      • Cheatsheets
      • Tutorials & Guides
    Home»Development»How to Document Governing Procedures for Open-Source Communities

    How to Document Governing Procedures for Open-Source Communities

    July 16, 2025

    In open source communities, we often discuss contribution guidelines, codes of conduct, and onboarding new contributors. But one thing we don’t talk about nearly enough? Governance.

    Governance sounds serious. But at its core, it simply means: how do we make decisions, and who gets to make them? It doesn’t matter if you’re working on a project at the grassroots level with a few maintainers or a mature open-source ecosystem – the guiding procedures influence how people contribute, manage issues, and develop into leaders.

    And, like with anything in open source – if it isn’t documented, it may as well not exist.

    In this article, I’ll explain why governance documentation is important, what to include, and how to document governing procedures that are useful, clear, and human.

    Table of Contents

    • Why Governance Matters (and Why You Should Document It)

    • What your Governance Documentation Should Have

    • Make Governing Documentation Clear and Welcoming

    • How to Start Documenting Governing Procedures for Your Open Source Community

    Why Governance Matters (and Why You Should Document It)

    Every open-source community already has some kind of governance (even if it’s not written down). Sometimes it’s a single maintainer making all decisions. Sometimes it’s a small group of people “just knowing what’s best.” The danger here is not the structure itself but the lack of clarity around it.

    When governing procedures aren’t documented:

    • New contributors might be confused about how to get involved

    • Decisions appear arbitrary or biased

    • Power dynamics become invisible

    • Conflict becomes harder to manage or resolve fairly

    Documenting governance promotes trust, transparency, and predictability. It does not imply confining contributors to rigid rules – rather, it offers your community a common understanding of how things work and how they may change.

    What Your Governance Documentation Should Have

    You don’t need to start governance documentation from scratch. You probably already have fragments of governance in your README, CONTRIBUTING.md, or pinned messages in your community’s messaging platform. The goal is to bring them together into something clear, navigable, and contributor-friendly.

    Think of your governance documentation as a map. It should help contributors understand where they are, how things work, and what paths they can take, including:

    1. Mission and Values: Why does this project exist? What principles guide how decisions are made or prioritised? This can set the tone for governance and invite collaboration.

      The Good Docs Project mission statement

    2. Roles and Responsibilities: Who are the maintainers? What can contributors, reviewers, and core team members do? Who can open pull requests? Review them? Approve proposals? Define expectations and boundaries clearly.

    3. Decision-Making Process: How are technical decisions made? By consensus? By voting? Is there a lead maintainer with the final say? What types of decisions require community input? How are disputes resolved?

    4. Conflict Resolution: What happens if people disagree? Is there a process to escalate issues respectfully?

    5. Proposal Process: How are changes proposed and discussed? Do you use an RFC system, GitHub discussions, or something else? What’s the typical timeline for review or feedback?

    6. Leadership Changes: How are new maintainers added? How can someone step down or be removed?

    7. Amending Governance: How can the governing procedure itself and its documentation be changed? Who has the authority to do so?

    8. Contributing Guidelines: How can contributors get started? How can they submit a pull request? What does review and approval look like? Is there a contributor ladder? What happens after someone contributes regularly? Make it easy for everyone to get around the overall contributor experience

      freeCodeCamp contribution guidelines

    9. Code of Conduct (linked or embedded): Governance and conduct are deeply connected. One shapes the culture, while the other protects it.

    Make Governing Documentation Clear and Welcoming

    Governance documentation doesn’t have to read like legal policy. In fact, it shouldn’t. A clear, welcoming tone helps readers feel included, especially newcomers or contributors from under-represented groups.

    The tone you use in your governance docs will shape how people feel about your community. It can either feel like a locked gate or a clear, friendly path forward. Here’s how to keep them human:

    • Use plain, clear language. Avoid overly complex terms, and explain acronyms if needed.

    • Be specific. “You must be in the Discord server to vote” is better than “participation is required.”

    • Keep it short and easy to read. Use lists, headings, and bullet points.

    • Explain the “why.” Give more context. People are more likely to trust rules when they understand why they exist.

    • Use examples or scenarios. For example, “when two maintainers disagree on a technical direction…”

    • Make it feel open. Invite contributors to ask questions or suggest changes, including to governing procedures. That alone can help your community evolve with less friction.

    How to Start Documenting Governing Procedures for Your Open Source Community

    I’ve helped document governance in projects where things had been informal for years. The hardest part? Starting. There’s always a fear of overstepping or “making it too official.”

    But writing things down doesn’t have to mean locking them in stone. In fact, the best governance docs are living documents, created with the community, reviewed regularly, and updated as the project grows.

    Some lessons I’ve learnt:

    • Start small. Even a bulleted list in a README is better than nothing.

    • Use your community’s questions as your guide. If people keep asking, “how do I become a maintainer?” write that down.

    • Let people review and comment. Co-create – don’t just impose.

    If you’re not sure where to begin, look to open-source projects that have done this well. For example, Kubernetes has a well-structured governance model documented in its community repository, outlining everything from roles to decision-making processes.

    Kubernetes governance model

    The Tor Project also maintains transparent and community-driven governance documentation (a project I had the opportunity to contribute to) that defines roles, responsibilities, and decision-making pathways that are communicated to contributors all over the world.

    Conclusion

    Documenting governance doesn’t have to be scary. It’s just about making the invisible visible and doing it in a way that invites people in. When you write down how things work, you make space for others to contribute confidently, understand the community they’re joining, and grow within it. That’s what governance should be about.

    So if your project doesn’t have its governing principles documented yet, don’t wait for it to get “big enough.” Start now, start small, and let it evolve with your community.

    And remember: governance isn’t about control. It’s about clarity.

    Source: freeCodeCamp Programming Tutorials: Python, JavaScript, Git & More 

    Facebook Twitter Reddit Email Copy Link
    Previous ArticleLearn how to build security into AI
    Next Article How to Build a Sustainable Open Source Contribution Routine

    Related Posts

    Artificial Intelligence

    Scaling Up Reinforcement Learning for Traffic Smoothing: A 100-AV Highway Deployment

    July 17, 2025
    Repurposing Protein Folding Models for Generation with Latent Diffusion
    Artificial Intelligence

    Repurposing Protein Folding Models for Generation with Latent Diffusion

    July 17, 2025
    Leave A Reply Cancel Reply

    For security, use of Google's reCAPTCHA service is required which is subject to the Google Privacy Policy and Terms of Use.

    Continue Reading

    CVE-2025-52467 – PostgreSQL Agentic Interface GitHub Token Exfiltration Vulnerability

    Common Vulnerabilities and Exposures (CVEs)

    U.S. Lawmakers Target ‘Adversarial AI’ in Bipartisan Push to Fortify Federal Systems

    Development

    A lifetime’s worth of ChatGPT? OpenAI could launch weekly and lifetime AI subscription plans

    News & Updates

    CVE-2025-4810 – Tenda AC7 Stack-Based Buffer Overflow Vulnerability

    Common Vulnerabilities and Exposures (CVEs)

    Highlights

    CVE-2025-29813 – Microsoft Visual Studio Pipeline Job Token Elevation of Privilege Vulnerability

    May 8, 2025

    CVE ID : CVE-2025-29813

    Published : May 8, 2025, 11:15 p.m. | 22 minutes ago

    Description : An elevation of privilege vulnerability exists when Visual Studio improperly handles pipeline job tokens. An attacker who successfully exploited this vulnerability could extend their access to a project.
    To exploit this vulnerability, an attacker would first have to have access to the project and swap the short-term token for a long-term one.
    The update addresses the vulnerability by correcting how the Visual Studio updater handles these tokens.

    Severity: 10.0 | CRITICAL

    Visit the link for more details, such as CVSS details, affected products, timeline, and more…

    CVE-2025-45029 – Winstar WN572HP3 Heap Overflow

    July 2, 2025

    Make videos accessible with automated audio descriptions using Amazon Nova

    June 13, 2025

    CVE-2025-4259 – Newbee-Mall Unrestricted File Upload Vulnerability

    May 4, 2025
    © DevStackTips 2025. All rights reserved.
    • Contact
    • Privacy Policy

    Type above and press Enter to search. Press Esc to cancel.